MMCP Server for SearXNG n8n IntegrationMCP Server for SearxNG n8n integration

mcp-so:mcp-server-searxng-n8n_tamler

View source
A
92/100

First Seen

Feb 19, 2026

Last Scanned

Feb 20, 2026

Findings

2

Score

92/100

MEDIUM 1
LOW 1

Findings (2)

MEDIUM
Auto-confirm flag bypassing user verification
L33

Detects -y, --yes, or --auto-approve flags in MCP/skill install commands that bypass user confirmation

npx n8n -y
FIX

Remove the -y/--yes auto-confirm flag from MCP server launch arguments. This flag bypasses user confirmation prompts and allows unattended execution of potentially dangerous operations.

FP?

Likely FP if the matched text is an isolated flag (-y or --yes) in documentation describing command-line options, not in an actual MCP config.

LOW
npx auto-install without confirmation
L33

Detects npx with -y flag that bypasses user confirmation for package installation

npx n8n -y
FIX

Replace npx -y with an explicit npm install step that pins the package to a specific version, then run it. Remove the -y flag to require user confirmation.

FP?

Likely FP if the npx command runs a well-known, trusted tool (e.g., create-react-app) in documentation context with no version pinning concern.